Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a3a2f33322d3336203d3e20323637303739.roa
File:                     323830343a343764343a3a2f33322d3336203d3e20323637303739.roa (raw, json)
Hash identifier:          lijJTHD5/5c0b7hBkficpqm4xzlNWoeYsdb7ESzAVpw=
Subject key identifier:   40:B6:4E:83:27:F4:66:49:08:D1:BE:55:44:7E:68:6C:E7:9F:64:E7
Certificate issuer:       /CN=1BFBD5F04D9EADA74D7C8E38B3066F5695736F16
Certificate serial:       425DBDB2F6C2267448E212FAD31A257D7AF3CA87
Authority key identifier: 1B:FB:D5:F0:4D:9E:AD:A7:4D:7C:8E:38:B3:06:6F:56:95:73:6F:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFBD5F04D9EADA74D7C8E38B3066F5695736F16.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a3a2f33322d3336203d3e20323637303739.roa
Signing time:             Tue 06 Aug 2024 15:11:34 +0000
ROA not before:           Tue 06 Aug 2024 15:06:34 +0000
ROA not after:            Tue 05 Aug 2025 15:11:34 +0000
asID:                     267079
IP address blocks:        2804:47d4::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/1BFBD5F04D9EADA74D7C8E38B3066F5695736F16.crl
                          rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/1BFBD5F04D9EADA74D7C8E38B3066F5695736F16.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFBD5F04D9EADA74D7C8E38B3066F5695736F16.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 11:24:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5d:bd:b2:f6:c2:26:74:48:e2:12:fa:d3:1a:25:7d:7a:f3:ca:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BFBD5F04D9EADA74D7C8E38B3066F5695736F16
        Validity
            Not Before: Aug  6 15:06:34 2024 GMT
            Not After : Aug  5 15:11:34 2025 GMT
        Subject: CN=40B64E8327F4664908D1BE55447E686CE79F64E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:2e:13:62:6f:57:6f:c2:3b:dd:d7:c2:89:9c:
                    a3:63:fe:0f:10:8e:51:5d:b3:93:72:5c:60:d6:f9:
                    97:07:58:b5:74:72:32:65:68:80:16:b2:51:06:56:
                    71:1f:ed:83:09:fb:87:fe:54:89:a2:0f:bd:ad:4c:
                    a8:3c:7a:3c:03:3e:f2:eb:fa:1c:1c:2e:c7:22:c7:
                    00:9f:65:56:d8:3d:e5:75:89:01:c4:ed:90:1f:fb:
                    66:65:42:6b:b1:ee:33:84:fc:66:0d:de:d7:71:b2:
                    9b:94:a1:ce:86:dc:f6:55:f6:09:67:42:dd:b4:ed:
                    03:60:ef:8c:f9:77:c3:ff:45:6d:be:2b:96:82:c3:
                    fd:36:dc:dc:79:a9:b2:06:81:79:c8:74:36:fa:9d:
                    5a:c4:55:db:e2:12:37:c5:71:35:01:6b:db:56:cb:
                    90:fb:4d:18:23:03:c0:1c:4d:33:a8:7b:e7:f7:bd:
                    3a:0c:9f:90:72:73:0b:68:3c:50:78:19:c1:03:ff:
                    4a:c2:64:c7:c4:0c:ec:4a:f3:0b:3a:8f:3d:49:dc:
                    88:4c:71:98:fc:28:5a:b3:57:62:72:92:30:11:24:
                    c3:53:28:6c:a0:22:d8:7d:8f:b7:56:a6:0c:0b:0d:
                    ed:0e:5a:53:14:e3:6a:99:b8:66:2b:83:ad:f2:16:
                    5f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B6:4E:83:27:F4:66:49:08:D1:BE:55:44:7E:68:6C:E7:9F:64:E7
            X509v3 Authority Key Identifier:
                keyid:1B:FB:D5:F0:4D:9E:AD:A7:4D:7C:8E:38:B3:06:6F:56:95:73:6F:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/1BFBD5F04D9EADA74D7C8E38B3066F5695736F16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BFBD5F04D9EADA74D7C8E38B3066F5695736F16.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/323830343a343764343a3a2f33322d3336203d3e20323637303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:49:be:c9:e5:57:55:64:a6:b9:35:e8:e6:91:26:66:61:af:
         a7:2d:0c:26:c7:00:7a:ec:f9:9c:05:3f:7f:0b:53:3b:d4:31:
         82:d1:6c:5f:a3:5c:60:d1:09:35:07:f8:5c:bf:2d:fc:a6:b4:
         4a:fe:74:eb:49:df:d8:36:38:b1:21:6d:bd:78:0f:40:7e:26:
         d2:08:2f:0f:32:61:7b:5f:e0:39:12:ad:2e:b6:e7:3d:c0:1b:
         40:d0:54:f4:da:4b:f3:00:3e:56:6c:0d:d3:e6:dc:00:79:55:
         06:78:e1:68:49:c5:10:f4:53:6d:5c:42:78:c3:05:4f:dd:5d:
         8f:07:bd:bb:52:e7:9a:75:a1:49:f8:be:57:f8:61:7d:33:0b:
         61:2b:e9:6f:92:6b:d4:49:bb:6c:65:97:f2:a0:18:ed:66:69:
         a7:b1:8c:d1:9a:17:b3:04:29:e9:d7:0a:d0:f1:69:73:2f:98:
         a3:00:35:1f:03:20:e4:85:90:ff:3b:c1:35:05:f2:ad:b5:bd:
         6d:cd:70:48:5b:44:7c:52:07:00:81:5e:86:32:4b:21:29:66:
         94:be:9c:46:13:71:df:b9:0b:78:40:a4:b7:00:1b:15:6f:7b:
         69:6f:12:c5:3e:0b:df:7e:a2:ce:98:ff:ad:cb:be:53:e3:91:
         6f:c1:5b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 13:02:11 2024 by rpki-client on console-fra.rpki-client.org